Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234322e302f32332d3233203d3e20323638333634.roa
File:                     34352e3233382e3234322e302f32332d3233203d3e20323638333634.roa (raw, json)
Hash identifier:          9L4Ih3EDczKoymBfm9enegda5fwCTgNexatS4iCxGjs=
Subject key identifier:   C4:3F:3B:2D:0D:5F:F8:C6:8A:B1:42:4B:D0:9A:17:CB:6D:51:E3:A6
Certificate issuer:       /CN=B445A2940634EDC971D4185E883796F1FFA053D1
Certificate serial:       0309C68C764AE080C1C9551D171DB8CF3764A0E9
Authority key identifier: B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234322e302f32332d3233203d3e20323638333634.roa
Signing time:             Thu 04 Apr 2024 13:20:10 +0000
ROA not before:           Thu 04 Apr 2024 13:15:10 +0000
ROA not after:            Thu 03 Apr 2025 13:20:10 +0000
asID:                     268364
IP address blocks:        45.238.242.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:09:c6:8c:76:4a:e0:80:c1:c9:55:1d:17:1d:b8:cf:37:64:a0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B445A2940634EDC971D4185E883796F1FFA053D1
        Validity
            Not Before: Apr  4 13:15:10 2024 GMT
            Not After : Apr  3 13:20:10 2025 GMT
        Subject: CN=C43F3B2D0D5FF8C68AB1424BD09A17CB6D51E3A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:f0:a7:6b:d2:64:d4:80:d9:3e:dc:c2:b4:
                    c5:2c:5e:f6:56:81:90:4c:30:4f:06:a5:95:3d:05:
                    47:39:b1:44:9a:5e:06:ef:70:41:0a:c4:83:12:e5:
                    c1:2e:0b:0b:7d:6e:ef:66:54:86:8d:3e:fb:7b:2d:
                    58:99:6b:b6:56:6d:65:d8:bb:56:96:08:20:52:bf:
                    e2:0e:b4:a3:d2:2d:65:ac:f5:9e:bf:e2:cf:c4:4d:
                    e2:77:f8:b5:23:df:55:8c:05:51:77:82:a5:2f:1c:
                    b8:a9:6b:79:15:a7:99:c6:13:9d:01:37:91:7f:41:
                    55:b1:7e:46:a1:1b:8d:c6:d0:67:00:c4:df:1d:56:
                    93:06:2a:be:8d:30:f4:07:ab:e1:9a:51:a7:68:3a:
                    63:a9:ba:f6:d1:22:8b:21:b5:0c:2d:d2:40:02:ab:
                    63:50:a0:4c:67:c6:00:95:8e:27:b5:81:0d:e9:c4:
                    23:e1:a2:8b:b9:ab:b1:c2:3d:90:05:56:da:78:58:
                    30:7c:b8:8b:89:ea:48:4d:95:85:e6:17:8f:61:61:
                    a7:7e:f5:80:8f:18:bb:2b:11:0e:85:46:18:d0:d4:
                    e4:53:93:f7:1f:38:65:9d:33:5a:bc:01:f7:56:47:
                    3d:36:48:43:66:ea:b9:cd:0b:6b:e7:40:8d:89:21:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3F:3B:2D:0D:5F:F8:C6:8A:B1:42:4B:D0:9A:17:CB:6D:51:E3:A6
            X509v3 Authority Key Identifier:
                keyid:B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234322e302f32332d3233203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:51:93:0c:20:20:df:b3:7b:2b:28:8a:ef:b6:b3:2c:70:7f:
         a5:bb:bd:94:4d:aa:ae:6c:22:85:86:65:54:ff:cd:0b:7b:29:
         c2:c2:8d:b0:03:b1:b6:52:f5:e3:13:43:48:0e:21:79:72:87:
         39:6d:85:65:ef:3f:39:de:be:be:bd:9e:ce:d1:7d:7b:39:66:
         0b:6e:2b:b0:58:b5:b2:49:e4:dc:4a:84:be:5d:ac:da:f4:67:
         35:54:87:70:04:f0:ac:3a:1c:57:f6:a5:2e:c8:98:61:5d:1f:
         5f:36:e1:dc:34:fc:3a:55:c6:a6:b4:6f:f7:a6:8c:8d:e9:41:
         a9:65:e0:9d:4d:15:4c:42:e9:bf:3e:bc:53:b2:2f:64:fb:85:
         3d:db:6f:ea:31:d0:1f:18:a3:98:0c:97:2d:ec:c7:58:11:07:
         3b:af:f4:4b:50:86:5b:d8:f3:05:c1:90:fc:34:75:c8:31:af:
         5d:16:dc:86:e4:c7:46:34:de:ff:9c:f3:02:c6:f6:b9:92:95:
         6e:3b:2d:60:ae:44:29:10:a1:a1:07:1c:28:1f:46:a6:15:f2:
         5c:ac:1d:49:f4:b2:6d:7e:1a:ff:87:2f:eb:70:4e:bd:1c:e8:
         dd:72:cf:ab:74:5c:93:89:64:92:fd:b9:65:5f:b3:1f:dd:1d:
         d5:8c:01:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:54:43 2024 by rpki-client on console-ams.rpki-client.org